The ArcSight SIEM Integration Expert is responsible for the end-to-end integration of log sources into the ArcSight Security Information and Event Management (SIEM) platform. This role requires deep expertise in ArcSight architecture and components, with a strong focus on onboarding logs from new systems, log normalization, and developing alert rules to detect potential security threats.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Key Responsibilities include:
- Acting as a subject matter expert on ArcSight SIEM, including configuration, management, and optimization.
- Onboarding and integrating log sources from various systems and platforms into ArcSight.
- Normalizing and parsing log data to ensure consistency and usability within the SIEM environment.
- Developing and fine-tuning correlation and alert rules to detect suspicious activities and potential security incidents.
- Collaborating with IT and security teams to understand log requirements and ensure comprehensive security monitoring.
- Providing support for troubleshooting, incident response, and continuous improvement of SIEM use cases.
Key Skills:
- Deep technical expertise with ArcSight SIEM architecture and components (ESM, Connectors, Logger, etc.).
- Hands-on experience integrating and parsing logs from diverse systems.
- Strong knowledge of log normalization, event correlation, and rule development.
- Familiarity with threat detection techniques and security best practices.
Location: Dubai, United Arab Emirates
Work Conditions: On-site, Full-time
Language Requirements: Not specified.
